Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC6344C026911F1AB811CEBDAE4EC9C.roa
File: DCC6344C026911F1AB811CEBDAE4EC9C.roa (raw, json)
Hash identifier: qYICBxuZEVtTL/OR4HkU9W33a3LaqvzAc3xUntPPFqw=
Subject key identifier: BF:D0:B7:38:CE:53:0F:9D:77:D2:EC:9A:AB:2B:C4:9A:27:EB:81:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B8A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC6344C026911F1AB811CEBDAE4EC9C.roa
Signing time: Thu 05 Feb 2026 08:08:33 +0000
ROA not before: Thu 05 Feb 2026 08:08:26 +0000
ROA not after: Fri 13 Mar 2026 08:08:26 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112804 (0x1b8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 5 08:08:26 2026 GMT
Not After : Mar 13 08:08:26 2026 GMT
Subject: CN=69845001-0b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:8a:0e:ad:2c:3f:5d:82:a8:b9:05:08:2d:
21:e9:e1:67:e2:a1:4d:e8:2f:5e:95:6a:e0:0d:58:
23:0d:06:90:ea:41:91:81:fb:2f:d9:ce:15:4c:4e:
5a:53:4a:9c:02:1e:5e:08:16:e0:a1:63:27:9e:f2:
d4:c7:ca:46:2a:e2:c9:6f:4d:f0:cf:9e:a8:66:9b:
90:b4:6e:8e:6b:b6:5b:42:7d:bc:69:13:ce:cc:96:
98:b5:30:b1:ef:ea:9e:55:78:6c:6d:30:c7:fc:77:
95:b7:9d:d7:2b:3b:39:bc:e3:28:3f:93:c3:a8:08:
0c:69:b0:8c:c6:d5:d3:09:87:79:54:3b:e7:9b:c3:
68:91:05:a3:d1:be:27:6e:c0:01:93:13:01:40:6e:
e2:55:68:20:c5:5b:28:8d:1d:cb:c5:99:f6:b0:c1:
d2:63:e8:04:de:84:a7:20:1f:a3:6a:26:c3:75:f5:
b3:6f:4b:dd:bd:59:88:35:38:af:a9:3d:ce:f2:a2:
40:0f:26:be:7d:a8:f8:ff:3d:f9:7d:8a:49:dd:f9:
51:c3:f4:07:77:04:36:15:f3:a7:70:4e:e7:cf:83:
2b:f8:f8:2a:43:66:36:0e:9e:a8:11:80:be:51:99:
38:c9:9a:63:f2:d6:16:1a:1c:ba:49:7a:c5:fd:08:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D0:B7:38:CE:53:0F:9D:77:D2:EC:9A:AB:2B:C4:9A:27:EB:81:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC6344C026911F1AB811CEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:59:90:2b:91:41:7e:e0:af:d0:4f:eb:10:0e:ad:64:0a:62:
b5:a7:60:5a:03:2f:bd:94:73:00:cd:7f:ee:fe:93:da:30:47:
f0:10:7d:e7:d2:da:73:6f:54:42:d4:25:1a:92:ed:c9:c1:00:
82:02:5d:ef:d8:c7:2c:5e:65:aa:64:3a:04:49:b0:a7:9f:ae:
8b:f8:d2:75:e5:79:30:95:51:a9:a7:77:42:19:b8:c2:6a:4b:
d9:85:8f:2f:8b:09:01:47:80:2e:8b:ae:1b:fa:ea:2f:1a:28:
d6:cd:4c:3f:72:78:74:b5:14:53:58:40:46:6f:97:68:1e:95:
05:8a:d6:6b:a9:9d:b6:26:a3:c3:2f:1b:85:14:e8:58:02:9d:
63:f7:05:4a:01:1b:67:8a:b1:fe:f9:5c:8a:b8:43:80:1b:0b:
b7:fc:9a:b3:04:26:f7:90:a2:88:95:e4:27:24:34:f6:7c:fb:
47:39:d3:fb:5a:a5:43:de:90:7f:03:51:29:7d:27:8a:44:bf:
65:ee:17:72:f4:0a:7b:82:9b:1e:10:2a:20:1c:7d:cf:de:05:
28:ff:ca:51:9d:a3:f5:d1:55:73:5a:b5:ae:50:9e:78:2c:cc:
9a:c7:ef:7d:46:e5:b6:49:49:d7:a8:ed:f0:5d:b3:59:31:9f:
b1:ad:45:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbikMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMjA1MDgwODI2WhcNMjYwMzEzMDgwODI2WjAYMRYw
FAYDVQQDEw02OTg0NTAwMS0wYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0s2KDq0sP12CqLkFCC0h6eFn4qFN6C9elWrgDVgjDQaQ6kGRgfsv2c4V
TE5aU0qcAh5eCBbgoWMnnvLUx8pGKuLJb03wz56oZpuQtG6Oa7ZbQn28aRPOzJaY
tTCx7+qeVXhsbTDH/HeVt53XKzs5vOMoP5PDqAgMabCMxtXTCYd5VDvnm8NokQWj
0b4nbsABkxMBQG7iVWggxVsojR3LxZn2sMHSY+gE3oSnIB+jaibDdfWzb0vdvVmI
NTivqT3O8qJADya+faj4/z35fYpJ3flRw/QHdwQ2FfOncE7nz4Mr+PgqQ2Y2Dp6o
EYC+UZk4yZpj8tYWGhy6SXrF/Qiu7QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL/Q
tzjOUw+dd9LsmqsrxJon64EtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQ0M2MzQ0QzAyNjkxMUYxQUI4MTFDRUJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsYLMA0GCSqGSIb3DQEB
CwUAA4IBAQDUWZArkUF+4K/QT+sQDq1kCmK1p2BaAy+9lHMAzX/u/pPaMEfwEH3n
0tpzb1RC1CUaku3JwQCCAl3v2McsXmWqZDoESbCnn66L+NJ15XkwlVGpp3dCGbjC
akvZhY8viwkBR4Aui64b+uovGijWzUw/cnh0tRRTWEBGb5doHpUFitZrqZ22JqPD
LxuFFOhYAp1j9wVKARtnirH++VyKuEOAGwu3/JqzBCb3kKKIleQnJDT2fPtHOdP7
WqVD3pB/A1EpfSeKRL9l7hdy9Ap7gpseECogHH3P3gUo/8pRnaP10VVzWrWuUJ54
LMyax+99RuW2SUnXqO3wXbNZMZ+xrUW8
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:56 2026 by rpki-client